# Source: PSA: Make sure your website patches these PHP vulnerabilities - Hypertext

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

htxt.co.za: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PSA: Make sure your website patches these PHP vulnerabilities - Hypertext

**htxt.co.za** · [https://htxt.co.za/2026/10/psa-make-sure-your-website-patches-these-php-vulnerabilities/](https://htxt.co.za/2026/10/psa-make-sure-your-website-patches-these-php-vulnerabilities/) · published 2026-10-23T09:21:17 · added by `curator@php.newsroom` · slug `htxt-2026-10-psa-make-sure-your-website-patch`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261027T121358Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Hypertext (South Africa, English), 23 October: a public-service item telling site owners to make sure the PHP patch is applied. It quotes the PHP secu...

## What it says, as the collector read it

#### PSA: Make sure your website patches these PHP vulnerabilities - Hypertext

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `za/news/htxt/2026-10-psa-make-sure-your-website-patches-these-php-vulnera`, snapshot `20261027T121358Z`. Copied byte for byte; every file's sha256 is in `captures/20261027T121358Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Hypertext (South Africa, English), 23 October: a public-service item telling site owners to make sure the PHP patch is applied. It quotes the PHP security team's advance notice of a release at 14:00 UTC on 21 October for two critical flaws rated 9.2 on CVSS 4.0, and Sophos Counter Threat Unit's Don Smith that the immediate challenge is finding and managing every instance where PHP runs, that systems which cannot be patched should be isolated from the internet in line with NCSC advice, and that threat actors will move fast with AI help and organisations should watch PHP and web-server processes for unusual command execution. No new facts.

> The immediate challenge is not simply installing a patch, but finding and managing every instance where PHP is running.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PSA: Make sure your website patches these PHP vulnerabilities - Hypertext". Selected mechanically, not read by a person.

#### Capture notes

Language `en-GB`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261027T121358Z · HTTP 200 · https://htxt.co.za/2026/10/psa-make-sure-your-website-patches-these-php-vulnerabilities/- `headers.json` 9f2ca6822c14f93a7e1190347e0827dbd54ddccb62d8121b1d0dbdca274b9ccd 1,344 bytes
- `page.html` 73e92ee77839370a9463cb47ece74777798e875c45dd39eccad571375f0641c3 555,480 bytes
- `provenance.json` d7dff598bd6c704bfb18cd0e32658f0301f3c7292c058845ef37224e2ce75e8b 1,753 bytes
- `rendered.html` d7f525997174f5cdbc78c67f81a2caedf53ea6eea66777247876616324234c19 556,074 bytes
- `screenshot.jpg` af56e8786cda9c96c4447e041204ca3f25a274bfa4805a404c8789376161f626 313,850 bytes
- `text.txt` 4304817d7920b81f0e32c0061b523e1de8f0017a1c71f9a54a2ea8657df53d25 4,959 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.49 · data as of 2026-10-27T19:13Z · vault commit 6f0d5c50bf12 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/htxt-2026-10-psa-make-sure-your-website-patch/index.html